The Master Table of Contents lists all Version 11 documentation. These are a few useful links:
- RSA NetWitness Platform Online Documentation
- RSA NetWitness Platform 11.5 Product Documentation
- RSA NetWitness Platform 11.4 Product Documentation
- RSA NetWitness Platform 11.3 Product Documentation
- RSA NetWitness Platform 11.2 Product Documentation
- RSA Content Table of Contents
- RSA NetWitness Platform Supported Event Sources
Note: RSA NetWitness Platform Versions 11.0 and 11.1 have reached end of primary support (EOPS). The online documentation for these versions is still included in RSA NetWitness Platform Online Documentation. If you need to view a PDF of an EOPS document, please provide the title of the document and the URL to customer support (see https://community.rsa.com/docs/DOC-1294).
Getting Started Guides
Getting Started Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Hosts and Services Getting Started Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
NetWitness Endpoint Quick Start Guide | HTML PDF : 11.3 11.4 11.5 |
NetWitness Investigate Quick Start Guide | HTML PDF : 11.3 11.4 11.5 |
NetWitness UEBA Quick Start Guide | HTML PDF : 11.3 11.4 11.5 |
Planning and Setup Guides
Deployment Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Licensing Management Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
User Guides
Alerting with ESA Correlation Rules User Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Event Sources Management User Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Log Parser Customization Guide | HTML PDF : 11.2 11.3 11.4 11.5 |
Log Parser Tool v1.1 User Guide | |
Malware Analysis User Guide | HTML PDF : 11.3 11.4 11.5 |
NetWitness Investigate User Guide (Investigation and Malware Analysis User Guide) | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
NetWitness Endpoint User Guide | HTML PDF : 11.3 11.4 11.5 |
NetWitness Respond User Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
NetWitness UEBA User Guide | HTML PDF : 11.3 11.4 11.5 |
Reporting User Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Hosts and Services Configuration Guides
Archiver Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Automated Threat Detection Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 |
Broker and Concentrator Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Context Hub Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Core Database Tuning Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Decoder and Log Decoder Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
ESA Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
NetWitness Endpoint Configuration Guide (Endpoint Insights Configuration Guide) | HTML PDF : 11.1 11.2 11.3 11.4 11.5 |
Log Collection Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Malware Analysis Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
NetWitness Respond Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Reporting Engine Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
UEBA Configuration Guide | HTML PDF : 11.5 |
Warehouse Connector Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Warehouse (MapR) Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 |
Workbench Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Windows Legacy Collection Guide (11.x) |
System Configuration, Management, and API Guides
Data Privacy Management Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Live Services Management Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
API User Guide | PDF : 11.1 11.2 11.3 11.4 11.5 |
NetWitness Shell User Guide | HTML PDF : 11.4 11.5 |
NwConsole User Guide (Command Line Interface User Guide) | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Recovery Tool User Guide | HTML PDF : 11.2 11.3 11.4 11.5 |
RESTful API User Guide | HTML PDF : 11.x 11.4 11.5 |
Service Configuration Properties Guide | HTML PDF : 11.4 11.5 |
Storage Guide | HTML PDF : 11.4 11.5 |
System Configuration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
System Maintenance Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
System Security and User Management Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Security Configuration Guides (Maintenance Contract Required)
Integration Guides for Other RSA Products
RSA Archer Integration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
RSA Endpoint Integration Guide | HTML PDF : 11.0 11.1 11.2 11.3 11.4 11.5 |
Release Notes
Release Notes for RSA NetWitness Platform 11.5 | HTML PDF |
Release Notes for RSA NetWitness 11.5.0.1 | HTML PDF |
Release Notes for RSA NetWitness 11.5.1 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.4.1.1 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.4.1 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.4.0.1 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.4 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.3.2.1 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.3.2 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.3.1.1 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.3 | HTML PDF |
Release Notes for RSA NetWitness Platform 11.2.1.2 | HTML PDF |
Logs & Network 11.2 Release Notes | |
Logs & Packets 11.1 Release Notes | |
Log Parser Tool v1.1 Release Notes | |
Logs & Packets 11.0 Release Notes | |
Logs & Packets 11.0.0.1 Release Notes | |
Logs & Packets 11.0.0.2 Release Notes |
11.5 Installation and Upgrade Guides
Upgrade Guide (11.3.x.x or 11.4.x.x to 11.5) | HTML PDF |
Upgrade an 11.x Physical or Virtual Host to 11.5.0.1 | HTML PDF |
Upgrade Guide for 11.5.1 | HTML PDF |
Physical Host Installation Guide (11.5) | HTML PDF |
Virtual Host Installation Guide (11.5) | HTML PDF |
AWS Installation Guide (11.5) | HTML PDF |
Azure Installation Guide (11.5) | HTML PDF |
Google Cloud Platform Installation Guide (11.5) | HTML PDF |
Endpoint Agent Installation Guide (11.5) | HTML PDF |
UEBA Standalone Installation Guide (11.5) | |
USB Build Stick for ISO Instructions (11.3 and Later) | HTML PDF |
Event Export Connector Installaion and Configuration Guide |
11.4 Installation and Upgrade Guides
Upgrade Guide (11.2.x.x or 11.3.x.x or 11.4.0.x to 11.4.1) | HTML PDF |
Upgrade Guide (11.2.x.x or 11.3.x.x to 11.4) | HTML PDF |
Physical Host Installation Guide (11.4) | HTML PDF |
Virtual Host Installation Guide (11.4) | HTML PDF |
AWS Installation Guide (11.4) | HTML PDF |
Azure Installation Guide (11.4) | HTML PDF |
Google Cloud Platform Installation Guide (11.4) | HTML PDF |
NetWitness Endpoint 4.4.0.x to RSA NetWitness Platform 11.4 Migration Guide | HTML PDF |
Endpoint Agent Installation Guide (11.4) | HTML PDF |
UEBA Standalone Installation Guide (11.3 and Later) | HTML PDF |
USB Build Stick for ISO Instructions (11.3 and Later) | HTML PDF |
11.3 Installation and Upgrade Guides
Update Guide for RSA NetWitness Platform 11.3.2 | HTML PDF |
Upgrade Guide for RSA NetWitness Platform 11.3.1.1 | HTML PDF |
Physical Host Installation Guide (11.3) | HTML PDF |
Physical Host Upgrade Checklist (10.6.6.x to 11.3) | HTML PDF |
Physical Host Upgrade Guide (10.6.6.x to 11.3) | HTML PDF |
Virtual Host Installation Guide (11.3) | HTML PDF |
Virtual Host Upgrade Checklist (10.6.6 to 11.3) | HTML PDF |
Virtual Host Upgrade Guide (10.6.6 to 11.3) | HTML PDF |
AWS Installation Guide (11.3) | HTML PDF |
AWS Upgrade Guide (11.3) | HTML PDF |
Azure Installation Guide (11.3) | HTML PDF |
Azure Upgrade Guide (10.6.6.x to 11.3) | HTML PDF |
NetWitness Endpoint 4.4.0.x to RSA NetWitness Platform 11.3 Migration Guide | HTML PDF |
Endpoint Agent Installation Guide (11.3) | HTML PDF |
UEBA Standalone Installation Guide (11.3) | HTML PDF |
USB Build Stick for ISO Instructions (11.3) | HTML PDF |
11.2 Installation and Upgrade Guides
Physical Host Installation Guide (11.2) | |
Virtual Host Installation Guide (11.2) | |
Build Stick Instructions (11.x) | |
Endpoint Insights Agent Installation Guide (11.2) | |
Physical Host Upgrade Guide (10.6.6 to 11.2) | |
Physical Host Upgrade Checklist (10.6.6.x to 11.2) | |
Virtual Host Upgrade Guide (10.6.6 to 11.2) | |
Virtual Host Upgrade Checklist (10.6.6 to 11.2) | |
AWS Deployment (11.2) | |
AWS Upgrade Guide (10.6.6 to 11.2) | |
Azure Deployment guide (11.2) | |
Azure Upgrade Guide (10.6.6 to 11.2) | |
Update Guide (11.0.x.x or 11.1.x.x to 11.2) | |
Windows Legacy Collection Guide (11.x) |
11.1 Installation and Upgrade Guides (EOPS)
Physical Host Installation Guide (11.1) | |
Virtual Host Installation Guide (11.1) | |
Build Stick Instructions (11.1) | |
Endpoint Insights Agent Installation Guide (11.1) | |
Physical Host Upgrade Guide (10.6.5 to 11.1) | |
Physical Host Upgrade Checklist (10.6.5.x to 11.1) | |
Virtual Host Upgrade Guide (10.6.5 to 11.1) | |
Virtual Host Upgrade Checklist (10.6.5 to 11.1) | |
AWS Deployment Guide | |
AWS Upgrade Guide (10.6.5 to 11.1) | |
Azure Deployment Guide (11.1) | |
Azure Upgrade Guide (10.6.5 to 11.1) | |
Update Guide (11.0.x.x to 11.1) | |
Windows Legacy Collection Guide (11.x) |
11.0 Installation and Upgrade Guides(EOPS)
Physical Host Installation Guide (11.0) | |
Build Stick Instructions (11.x) | |
Physical Host Upgrade Guide (10.6.4.x to 11.0) | |
Physical Host Upgrade Checklist (10.6.4.x to 11.0) | |
Virtual Host Setup Guide | |
Virtual Host Upgrade Guide (10.6.4.x to 11.0) | |
Physical Host Upgrade Guide (10.6.5.x to 11.0) | |
Virtual Host Upgrade Guide (10.6.5.x to 11.0) | |
AWS Deployment Guide (11.0) | |
AWS Upgrade Guide (10.6.4.x to 11.0) | |
Azure Deployment Guide (11.0) | |
Azure Upgrade Guide (10.6.4.x to 11.0) | |
Windows Legacy Collection Guide (11.x) |
You are here
RSA NetWitness Platform 11.x Master Table of Contents